SSLSmart是一款高度灵活和可交互的SSL安全性测试工具,它可以测试SSL支持的cipher suite。它与其它一些SSL测试工具相比是可以执行深度测试,另外SSLSmart实用RUBY编写,支持windows和linux平台。SSLSmart的主要特点:
    Content Scan (default): Exact server response can be seen in HTML and Text forms for each cipher suite selected for the test URL. Basically, it shows various server error messages received for weak cipher suites from live systems.
    CONNECT Scan: Focuses only on success or failure of SSL socket connection with various cipher suites. This behavior does not offer any advantage over existing SSL testing tools and is thus likely to have similar issues with false positives. However, this scan is faster and consumes fewer network and CPU resources.
    Dynamic Cipher Suite Support: Most SSL testing tools provide a fixed set of cipher suites. SSLSmart hooks into Ruby OpenSSL bindings and offers dynamic “on the fly” cipher suite generation capabilities.
    Certificate Verification: SSLSmart performs server certificate verification. It uses the Firefox Root CA Certificate4 repository to perform Root CA verification. Additional Root CA Certificates can be added to the rootcerts.pem file or a custom .pem file can be supplied for Root CA Certificate verification.
    Proxy Support: SSLSmart provides web proxy support. For results to be accurate, it is important to use a transparent proxy5.
    Reporting: Reports can be generated in XML, HTML and Text formats along with their verbose versions. Verbose report versions include complete application response for each cipher suite and full details of the server certificate.
工具下载:http://www.mcafee.com/us/downloads/free-tools/sslsmart.aspx